Last updated: 27/09/2026 · This is a translation of the Italian version, which prevails in case of discrepancies.
1. Data controller
The data controller is Il Kiosko Panoramic Bar, with registered office at Salita Tognon, 18, 37019 Peschiera del Garda (VR), Italy. For any request concerning your data you can write to glugluzone@gmail.com.
2. What data we process
Browsing data. During normal operation, the IT systems running this website collect certain data whose transmission is implicit in the use of Internet protocols (for example IP address, date and time of the request, page visited, browser type). This data is used only to ensure that the website works properly and securely, and is kept in the server logs for the technical period set by the hosting provider.
Data you provide voluntarily. When you write to us using the contact form, by email or on WhatsApp, or call us to book, we process the data you give us: your name, email address or phone number, the content of your message and the booking details (date, time, number of people).
Cookies. For information about cookies, please see our cookie policy.
3. Purposes and legal bases
- Answering your requests and managing bookings received via the form, email, phone or WhatsApp. Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
- Operation and security of the website, prevention of abuse and spam. Legal basis: the controller's legitimate interest (Art. 6(1)(f) GDPR).
- Compliance with legal obligations and, where necessary, the establishment or defence of legal claims. Legal basis: legal obligation (Art. 6(1)(c)) and legitimate interest (Art. 6(1)(f)).
Your data is not used to send you marketing communications, nor for automated decision-making, including profiling.
4. Is providing data mandatory?
Providing your data is optional, but without a name, a contact detail and your message we cannot answer your request or record your booking.
5. How and for how long we keep data
Data is processed electronically with appropriate security measures. Messages sent through the form are not stored on the website: they are delivered by email and kept, like booking conversations, for as long as needed to handle your request and in any case no longer than 24 months after the last contact, unless the law requires otherwise.
6. Who we share data with
Data may be processed by providers of technical services to the controller, appointed as data processors (Art. 28 GDPR): in particular the website hosting provider for website and email hosting. Data is not disclosed to the public.
7. Links to external services
The website contains plain links to third-party services (WhatsApp, Google Maps, Instagram, Facebook, Tripadvisor). Until you click them, no data is sent to these services. If you use them – for example to message us on WhatsApp – processing by the service provider (such as WhatsApp Ireland Ltd or Google Ireland Ltd) is governed by its own privacy policy.
The website does not use external services for fonts, icons or statistics: everything is loaded from our own server.
8. Transfers outside the European Union
Data collected through the website is processed within the European Union and is not transferred to third countries. For external services you choose to use (for example WhatsApp), the safeguards described in their own privacy policies apply.
9. Your rights
At any time you can request access to your data, rectification, erasure, restriction of processing and data portability, and object to processing based on legitimate interest (Articles 15–22 GDPR). Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal. To exercise your rights, write to glugluzone@gmail.com.
If you believe that the processing infringes the GDPR, you have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the supervisory authority of the EU country where you live.
10. Changes
This policy may be updated. The date of the last change is shown at the top.